is it possible this works without checking the Proxy SSL option mentionned in the first reply to my post.
clientssl and serverssl can do client and server authentication. proxy ssl comes when you want client to be authenticated by server directly.
SSL Profiles Part 8: Client Authentication by John Wagnon
https://devcentral.f5.com/articles/ssl-profiles-part-8-client-authentication
SSL Profiles Part 9: Server Authentication by John Wagnon
https://devcentral.f5.com/articles/ssl-profiles-part-9-server-authentication
sol13385: Overview of the Proxy SSL feature
https://support.f5.com/kb/en-us/solutions/public/13000/300/sol13385.html
hope this helps.